Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ADB0BEA0903911EFB7F35892762E951A.roa
File: ADB0BEA0903911EFB7F35892762E951A.roa (raw, json)
Hash identifier: BVVQaoIqSZ3jSRvu0lBm4/YsoaFXinqRMgfnUP7UjWc=
Subject key identifier: 92:4A:AF:4D:EB:76:08:48:4C:B0:B1:C9:A1:33:98:63:10:91:A6:89
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 188D
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ADB0BEA0903911EFB7F35892762E951A.roa
Signing time: Tue 22 Oct 2024 05:51:27 +0000
ROA not before: Tue 22 Oct 2024 05:51:23 +0000
ROA not after: Thu 22 Oct 2026 05:51:23 +0000
asID: 212238
IP address blocks: 154.16.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6285 (0x188d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Oct 22 05:51:23 2024 GMT
Not After : Oct 22 05:51:23 2026 GMT
Subject: CN=67173d5f-2395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c5:6f:cb:01:43:32:5e:03:f6:5c:c9:35:52:
cd:21:83:a8:4a:92:a4:3b:e5:28:90:60:58:64:8f:
eb:54:6b:a3:56:41:d9:7f:31:7c:8d:a2:45:f2:34:
55:e1:3c:fc:8a:62:d6:34:31:bd:dd:ee:09:c6:c1:
63:62:2e:61:18:a8:05:ff:38:69:84:a1:76:5c:62:
fc:31:73:b8:4d:44:42:ec:fc:e8:95:8e:c6:57:21:
97:f6:64:a1:9f:cd:a8:5c:84:7d:cb:62:81:96:d3:
62:de:b0:14:72:2f:e3:60:97:18:9e:e3:34:c1:fc:
90:be:62:30:4a:03:6f:d3:22:7d:30:a7:78:d1:1d:
da:63:f2:27:55:d1:33:6f:77:47:67:51:7c:89:4e:
c8:68:bf:15:2a:b6:e3:2e:ec:51:3a:c3:76:59:04:
eb:22:98:20:72:93:74:5b:38:a3:d0:fe:28:ae:76:
d2:54:e0:ca:27:b5:5b:1a:78:2f:a0:7b:0a:bd:e6:
94:06:d8:aa:a5:63:67:8d:3a:e1:62:60:53:9e:fb:
04:3d:1a:85:4f:2f:f9:6d:9a:f8:ab:13:55:c9:9d:
d4:b1:af:4a:90:1b:d0:36:5a:3a:82:b9:bf:8c:67:
34:98:5e:eb:d2:ed:89:07:e8:12:25:e8:46:5c:65:
64:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4A:AF:4D:EB:76:08:48:4C:B0:B1:C9:A1:33:98:63:10:91:A6:89
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ADB0BEA0903911EFB7F35892762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.97.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:6e:a7:3c:fe:70:c2:71:b4:64:b3:9d:4e:7e:da:7b:db:b6:
84:9b:74:3f:81:b4:56:75:9f:a5:50:b5:9d:5d:89:70:09:f7:
a8:b3:32:89:f5:a9:28:e8:47:38:c4:8c:c4:e4:48:2e:8a:a9:
12:d8:2f:1b:69:5a:75:b2:32:7d:0f:69:9f:af:60:b4:2b:3e:
78:ee:b9:26:21:eb:23:30:36:ba:8c:78:44:ef:27:02:a9:7a:
8f:f3:5c:8b:33:85:a2:37:4d:8e:bf:f5:b4:39:26:13:0e:f7:
1a:bb:3e:2b:5a:e0:a7:33:f7:12:56:ef:56:10:a7:29:eb:dc:
53:06:eb:cd:af:5d:d0:9c:86:f2:00:c2:ed:62:7a:d5:7a:aa:
32:74:26:4c:7a:c9:23:25:82:13:1b:bc:f6:00:9d:0a:4d:99:
d3:c2:ca:09:3f:10:a7:95:db:0e:e5:14:6f:ef:4e:f2:5f:35:
bc:81:83:9b:66:cc:30:11:90:0b:b0:be:d0:61:12:3e:fc:d2:
b4:68:56:74:6e:bd:71:51:5a:ff:bd:3c:22:53:2d:58:95:7e:
65:18:e8:93:1f:74:28:bf:10:07:94:1d:a3:ce:44:2d:6d:18:
c4:7e:42:5e:8f:40:53:6d:10:76:d2:55:32:e0:20:56:c0:46:
17:c1:95:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:46 2024 by rpki-client on console-ams.rpki-client.org